Security Analyst – VAPT & Penetration Testing

About the role

The Security Analyst will lead comprehensive vulnerability assessment and penetration testing (VAPT) activities across the organization’s IT landscape. You will evaluate networks, applications, cloud platforms and security systems to identify weaknesses and provide actionable remediation guidance. This role works closely with technical teams to improve the overall security posture.

Key responsibilities

• Perform internal and external penetration tests on networks, servers, firewalls, endpoints and infrastructure.
• Execute web application and API testing, focusing on OWASP Top 10 and business‑logic flaws.
• Conduct vulnerability assessments, manually validate findings and eliminate false positives.
• Exploit identified vulnerabilities in a controlled manner to determine real impact.
• Test security of network devices, cloud environments, operating systems and source code.
• Develop and automate testing scripts using Python.
• Produce detailed reports with evidence, risk ratings, business impact and remediation recommendations.
• Collaborate with remediation teams, retest fixes and validate remediation effectiveness.

Required profile

• Strong hands‑on experience in VAPT across multiple layers (network, application, cloud).
• Familiarity with cybersecurity standards and frameworks such as OWASP, NIST, ISO/IEC 27001 and PCI DSS.
• Ability to communicate findings clearly to both technical and non‑technical stakeholders.
• Experience following established penetration‑testing methodologies and best practices.

Required skills

• Vulnerability Assessment & Penetration Testing (VAPT)
• Network, Web Application, API, Infrastructure and Cloud Security Testing
• Vulnerability Exploitation & Validation
• OWASP Top 10, SAST, DAST, Source‑Code Security Analysis
• Secure Coding Practices, Network & Operating System Security
• Python for security automation
• Burp Suite, Nmap, Nessus, Metasploit, Wireshark, Kali Linux